Markus Koschany authored 2 years ago and Sebastian Krzyszkowiak committed 1 year ago

openexr (2.5.4-2+deb11u1) bullseye-security; urgency=high
.
  * Non-maintainer upload.
  * Fix CVE-2021-3598, CVE-2021-3605, CVE-2021-3933, CVE-2021-3941,
    CVE-2021-23215, CVE-2021-26260 and CVE-2021-45942.
    Multiple security vulnerabilities have been found in OpenEXR, command-line
    tools and a library for the OpenEXR image format. Buffer overflows or
    out-of-bound reads could lead to a denial of service (application crash) if
    a malformed image file is processed.
    (Closes: #992703, #990450, #990899, #1014828, #1014828)

Gbp-Dch: Ignore

Gbp-Dch: Ignore

- CVE-2021-23169.diff added

Closes: #988240

Gbp-Dch: Ignore

Gbp-Dch: Ignore

Gbp-Dch: Ignore

Update to upstream version '2.5.4'
with Debian dir 1d9b76fd8470d46eb7467bf0a3e863696abd6ff1

Gbp-Dch: Ignore

Gbp-Dch: Ignore

Gbp-Dch: Ignore

Gbp-Dch: Ignore

Update to upstream version '2.5.3'
with Debian dir 4a25ff730d3fd739c003dd8547fdbf3c5b972e61

Gbp-Dch: Ignore

Gbp-Dch: Ignore

Needed to fix massive FTBFS.

Gbp-Dch: Short

Gbp-Dch: Ignore

Gbp-Dch: Ignore

Update to upstream version '2.5.2'
with Debian dir 34da4db12241cd50758155ec0ab7f336afded18d

Gbp-Dch: Ignore

Gbp-Dch: Ignore

This is a test to check if the library itself builds fine when tests
are disabled. Will re-enable tests once the culprit for the tests
failing will be discovered.

Gbp-Dch: Short

Gbp-Dch: Ignore

Gbp-Dch: Ignore

Update to upstream version '2.5.1'
with Debian dir 8cd105483e49acec3bfdc5b0cf487f90d725624b

Gbp-Dch: Ignore

Gbp-Dch: Ignore

Gbp-Dch: Ignore